Replies: 1 comment
-
|
I decided to just create a loader and eliminate the image base option. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Is there a way to obtain the image base in sleigh? I have a situation where the image base is larger than the default pointer size and when performing relocations a 16 bit address cannot compensate for the image base which is larger than 16 bits.
ex:
Image base is
0x10000The 16 bit register
HLis loaded with0x110cThe value at the address in
HLis then loaded into registerAX. However because the address with the image base is larger than 16 bits then incorrect address is used in the listing and decompiler.I seem to have other issues as the default image base is actually within a mirror area.
Beta Was this translation helpful? Give feedback.
All reactions